Siemens RUGGEDCOM CROSSBOW
MentionsSiemens
View CSAF Summary RUGGEDCOM CROSSBOW contains multiple vulnerabilities that could allow an attacker to execute arbitrary SQL commands on the underlying database, retrieve sensitive administrative credentials, escalate privileges, and perform unauthorized operations such as modifying system configurations or causing a denial of service.
Summary from CISA Advisories.
Explained
The technology and terms in this story. Learn more
- AttackPrivilege escalationGoing from limited access to more powerful access, such as from a normal user to administrator.
- AttackDDoS · Distributed denial of serviceFlooding a service with traffic from many machines until it can't respond.
- ConceptCVSS · Common Vulnerability Scoring SystemA 0–10 score for how severe a vulnerability is in theory.
- ConceptCVE · Common Vulnerabilities and ExposuresThe public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
Why it was possible
The weaknesses behind this story's CVEs, from each CVE Record.
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.
- CVE-2026-89196High 8.7EPSS 0.3%
- CVE-2026-89197High 8.7EPSS 0.3%
- CVE-2026-89198High 8.7EPSS 0.3%
- CVE-2026-89199High 8.7EPSS 0.2%
- CVE-2026-89200High 8.4EPSS 0.1%
- CVE-2026-89201High 7.7EPSS 0.2%
- CVE-2026-89202High 7.1EPSS 0.2%
- CVE-2026-89203Medium 5.3EPSS 0.2%
- CVE-2026-89204Medium 5.3EPSS 0.1%
- CVE-2026-89205Medium 5.3EPSS 0.2%
- CVE-2026-89206Medium 5.3EPSS 0.2%